hunner/nix
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add known hosts for syncoid

Browse source
This commit is contained in:
Hunter Haugen 2025-12-29 22:10:59 -08:00
parent d54d7bac5a
commit 39ca2631dd
Signed by: hunner
GPG key ID: EF99694AA599DDAD
2 changed files with 16 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

18
hosts/cryochamber/configuration.nix
View file

@ -170,23 +170,30 @@
group = "syncoid";
mode = "0400";
};
sops.secrets.zimaKnownHosts = {
owner = "syncoid";
group = "syncoid";
mode = "0444";
};
services.syncoid = {
enable = true;
#user = "backup";
sshKey = config.sops.secrets.syncoidSshKey.path;
#commonArgs = [
# #"--sshoption=StrictHostKeyChecking=off"
# "--sshoption=UserKnownHostsFile=/var/lib/syncoid/.ssh/known_hosts"
# "--sshoption=IdentitiesOnly=yes"
#];
commonArgs = [
#"--no-sync-snap"
#"--sshoption=StrictHostKeyChecking=off"
"--sshoption=UserKnownHostsFile=${config.sops.secrets.zimaKnownHosts.path}"
"--sshoption=IdentitiesOnly=yes"
];
commands."zima-bitrot" = {
source = "root@zima:bitrot";
target = "tank/backups/zima/bitrot";
recursive = true;
service.serviceConfig.BindReadOnlyPaths = [
config.sops.secrets.syncoidSshKey.path
config.sops.secrets.zimaKnownHosts.path
];
};
commands."zima-rpool-safe" = {
@ -195,6 +202,7 @@
recursive = true;
service.serviceConfig.BindReadOnlyPaths = [
config.sops.secrets.syncoidSshKey.path
config.sops.secrets.zimaKnownHosts.path
];
};
};